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This application is submitted in the name of Brian Lo Bue, Darrell Shively and 
Larry Nadeau, assignors to Cisco Technology, Inc., a California corporation. 

SPECIFICATION 

TITLE OF THE INVENTION 
ACTIVE CALL CONTEXT RECONSTRUCTION FOR PRIMARY/BACKUP 
RESOURCE MANAGER SERVERS 

FIELD OF THE INVENTION 
The present invention relates to a method and apparatus to reconstruct an 
interrupted user's network connection from an updated data string held in storage by 
the network server. 



3 BACKGROUND OF THE INVENTION 

n Computer networks have developed into an integral part of society and the 

economy. Network users obtain access from their host computer with dial-up capability 
to another computer with which to communicate through a variety of systems currently 
20 available. A user transmits a request or call from an access point across a medium to the 
remote site. The call will be identified by selected attributes in an access request data 
packet that may be used by the network accounting management. To facilitate access 
by authorized call-in users and network subscribers, a variety of network servers have 
been developed that may include computer hardware, software and/or firmware. These 
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servers are frequently designed to handle specific tasks within the network and operate 
with a dedicated database. A call-in user may thus be dependent on more than one 
server for continued access to the network, and if one server fails while others continue 
to operate, the user may nonetheless be disconnected from the network and be forced to 
5 establish a new connection even though the network remains active. 

The time consumed from repeated interruptions can lead to diminished 
productivity and severe frustration if critical data are denied or corrupted due to a 
recalcitrant server. Consequently, network administrators have sought to address this 
and other concerns by ensuring high reliability for servers and establishing backup 
JO systems. However, a backup server without access to the call's status from the 

identification in the data packet may be unable to maintain a previously established call, 
J5j resulting in the call being cut off. Consequently, aside from efforts to ensure high 
j J reliability of servers, the industry also requires a backup system with the ability to hand- 
le off a call-in user's network connection from a server that has failed to a backup server 
j J 5 by ensuring that call identification information is received by a backup server in a timely 
p fashion. 

=ji A connection from an access point to a network at a point of presence (PoP) may 

be maintained by an internet service provider (ISP) or a telephone company using 
communications media such as a public switched telephone network (PSTN), integrated 
20 services digital network (ISDN), or a cable television system, using one of several 

available mechanisms or protocols. Such protocols include the decentralized Institute of 
Electrical & Electronic Engineers (IEEE) standard 802.3 called Ethernet™, the token 
ring IEEE standard 802.5 incorporating a special bit-pattern to control transmission 
order, the asynchronous digital subscriber line (ADSL) under the American National 
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Standards Institute (ANSI) T1.413 standard, the hybrid fiber coax (HFC) used by cable 
television providers, or others as is well known in the art. An access point may contain a 
variety of server types for particular functions. These types include the authentication, 
authorization and accounting (AAA) server, the network access server (NAS), the 
5 resource pool manager server (RPMS), the home gateway router (HGR), the digital 
subscriber line aggregation multiplexer (DSLAM), along with many others well known 
in the art. 

A call-in user seeking a connection to the network may place a call across 
telephone lines or other media to a NAS through a particular port of the NAS, such as a 
40 modem port or ISDN port. The NAS answers the call, becoming coupled to the user, and 
% sends the call type and dialed number information service (DNIS) information to the 
tl RPMS, which matches the combination to a call discrimination table and compares the 
J network resources available to the session counts. Call types include speech, digital and 
* ! others known in the art. The call is rejected if the call type-DNIS combination appears 
JL 5 in the call discrimination table. If the customer profile session limits exceed threshold 
3 values, the call may be rejected or assigned a busy signal. If the call is accepted, it is 
q assigned to the NAS that answered it. A RPMS may provide resource management, dial 
services and call discrimination for a regional PoP or for a NAS connected to multiple 
ports. 

20 A RPMS enables telephone companies and ISPs to count, control, manage and 

provide accounting data on shared resources for wholesale virtual private dial-up 
network (VPDN) and retail dial network services across one or more NAS stacks. By 
tracking threshold access limits, the RPMS verifies to the NAS that there exist sufficient 
network resources to enable a user calling in to become connected to the network 
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(provided that the user has authorization). An illustration of the logic used by a RPMS 
can be seen in the flow diagram 10 of FIG. 1. An input 12 containing call type-DNIS 
information is provided to a call discriminator query 14, which compares the information 
to a series of discriminators implemented as a call discrimination table. If the call matches 
5 the table, it is unauthorized and the call is treated to rejection 16. If no match is found, 
the DNIS customer profile is queried 18, and if none is found, a default profile is queried 
20. If no default match is found, the call may be rejected 22. If the DNIS customer 
profile exists after query 18, the connection threshold is queried 24, and if not reached, 
or if a default customer match is found in the default query 20, then the number of 

.JO resources is queried 26. If sufficient resources are available, the call may be answered 

^ 28, whereupon the VPDN group is verified 30. 

h jj If the call does not match the VPDN group, a first retail query is performed 32, and 

jyi if refused, the call is rejected 34. If retail is accepted, the call is processed at retail cost 
" = 36. If the call matches the VPDN group, the domain name in the DNIS is queried 38. If 
\A5 the domain name does not match, a second retail query is performed 40. If refused, the 
q call is rejected 42, and if accepted the call is processed at retail cost 44. If the domain 
*£f name query 38 matches, the session and overflow thresholds are queried 46. If the 
thresholds are exceeded, the call is rejected 48, and if not a tunnel is negotiated 50. 

Returning to the maximum connections query 24, if the connection threshold has 
20 been reached, the overflow availability is queried 52, and if exceeded, the call may be 
rejected 54. If availability exists, the availability of resources is queried 56. If the 
resources available queries 26 or 56 are negative, the call may be rejected 58. If 
resources are available, the call is answered 60, with continued procedures to the VPDN 
group verification query 30, and so forth. 
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The RPMS enables shared resources to be used across multiple NASes for various 
resource allocation schemes (performing session counting on a group level). For 
example, NAS resource groups may be combined with different modem services and call 
types (such as speech or digital) into resource data assignments. Resource groups may 
5 be configured on the NAS and assigned by the RPMS based on customer requirements. 
The RPMS may use resource management protocol (RMP) software to communicate 
with the NAS. An illustration of this arrangement is illustrated in FIG. 2A, in which a 
NAS 62 is featured with RMP installed and connected to a RPMS 64 via a RMP 
interface 66. The call type-DNIS information transmitted to the RPMS 64 and the 

, JO approval or rejection response received by the NAS 30 are transferred through the RMP 

'% interface 66 using the RMP protocol 68. 

% | The RPMS may be composed of a server platform with appropriate RMP 

15 software, along with a Distributed Session Manager (DSM) library installed and linked 
to the server platform, A RPMS may be a scalable performance architecture (SPARC) 
Q5 hardware platform equipped with DSM software and connected to a database in a 
O memory device physically distinct from the RPMS. The DSM represents a linked library 
u5 to the RPMS to keep accounting data records for the RPMS, and it maintains session 
states across multiple servers. The database may hold the customer profiles, system 
configurations and other desired instrumentation. 
20 A local AAA server may be used in a network architecture incorporating a RPMS 

for the purpose of tracking users that access the network through calling line 
identification (CLID) and for creating records of the accounting data related to such 
users from outside the data communications network. The RPMS may communicate 
with a local AAA server using an internet authentication protocol, such as Terminal 
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Access Controller Access Control System Plus (TACACS+) or Remote Access Dial-In 
User Service (RADIUS). In the absence of a local AAA server, the RPMS may provide 
only DNIS-based wholesale VPDN dial services under the domain name, and a remote 
AAA server may be used for user call tracking and management. When the call ends, the 
5 record for billing purposes may be sent to a report manager server. 

As calls are received, the primary RPMS checks session counts to perform session 
management. These local counts are sent to the backup RPMS for synchronization. 
When the session counts approach a session limit, the primary RPMS reverses the 
exchange to get the session count from the backup RPMS for each call, thereby 

40 ensuring that an accurate session count is maintained and prevents more users from 

p accessing the network than are permitted, a condition called "over-subscription". 

* J However, this exchange may reduce performance when the customer profile approaches 

■5 its session limit for resource allocation. 

* ; A client NAS may be configured with a list of RPMSes from which to attempt 

J.5 contacting a server on the fail-over list. The message data may be exchanged between 
3 the NAS and the server by the RMP. If the NAS cannot reach the first server on the list, 
q it tries to contact the next server, and so forth. In a typical configuration, the primary 
RPMS would be first on the list, and the backup RPMS would be the second on the list, 
with no third server listed. An illustration of this list's use by multiple NASes is depicted 
20 in FIG. 2B in which a wide area network (WAN) 70 is connected to a first RPMS labeled 
"A" 72, a second RPMS labeled "B" 74, both independent of each other, and a backup 
RPMS labeled "C" 76. A first NAS stack 78 with a first server list for RPMSes "A" and 
"C" is connected to RPMS "A" 72. A second NAS stack 80 with a second list for 
RPMSes "B" and "C" is connected to RPMS "B" 74. The NAS stacks 78 and 80 are 
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connected to their respective local RPMSes "A" 72 and "B" 74, respectively through 
RMP 82, and via the WAN 70 to RPMS "C" 76. If RPMS "A" 72 fails, the first list on 
the first NAS stack 78 would "roll over" or transfer resource management to RPMS 
"C" 76. Similarly, if RPMS "B" 74 fails, the second list on the NAS stack 80 would 
5 likewise proceed to RPMS "C" 76. However, if the backup RPMS lacks the 
information for call reconstruction, current calls may be discontinued. 

In the event that either the primary RPMS or its database is unreachable, the call 
may be interrupted while the NAS initiates a timing switch. If the call is not restored, the 
switch times out, causing the call to be dropped from the NAS and a busy signal sent to 
,40 the call-in user. Incorporation of a backup RPMS might initiate new user calls begun 
~'% subsequent to the primary RPMS access failure, but absent a mechanism to restore the 
jij j interrupted calls, the continuity of service for previous users would not be feasible. To 
m avoid interruption of a call, the primary and backup servers must be in communication 
J with each other and share information about a call's context as it is updated, thereby 
iJ5 consuming valuable communication bandwidth. 
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SUMMARY OF THE INVENTION 
A method and apparatus for network server recovery maintains an ongoing call 
by reconstructing its call context from a server-state attribute (SSA) that is generated by 
a first server, recorded in separate storage and retrieved by a second server in the event 
that a connection to the first server is interrupted. The SSA encodes call data that can 
be used to enable a server to maintain the call. The separate storage is preferably 
associated with a network access server (NAS) that does not itself use the SSA. 
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BRIEF DESCRIPTION OF THE FIGURES 
FIG. 1 is a flowchart illustrating the conventional RPMS logic for responding to a 

5 call 

FIG. 2A is a diagram illustrating a conventional connection between a NAS and a 
RPMS. 

FIG. 2B is a diagram illustrating the maintenance of server lists in conjunction 
with primary RPMS systems and a backup RPMS in accordance with the prior art. 

JO FIG. 3 is a diagram illustrating a network having a primary RPMS and a backup 

% RPMS in accordance with a presently preferred embodiment of the present invention. 

% I FIG. 4 is a diagram illustrating an example server-state attribute data string in 

accordance with a presently preferred embodiment of the present invention. 

~ s FIG. 5 is a process flow diagram illustrating the reconstruction of a data string in 

Ll5 accordance with a presently preferred embodiment of the present invention. 

q FIG. 6 is a process flow diagram illustrating server failure response in accordance 

•S with a presently preferred embodiment of the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Those of ordinary skill in the art will realize that the following description of the 
present invention is illustrative only and not in any way limiting. Other embodiments of 
5 the invention will readily suggest themselves to such skilled persons having the benefit 
of the within disclosure. 

In accordance with a presently preferred embodiment of the present invention, 
the components, process steps, and/or data structures may be implemented using various 
types of operating systems, computing platforms, computer programs, and/or general 
40 purpose machines. In addition, those of ordinary skill in the art will readily recognize 
2 that devices of a less general purpose nature, such as hardwired devices, or the like, may 
ij also be used without departing from the scope and spirit of the inventive concepts 
£ disclosed herein. 

j" The present invention relates to a method and apparatus to enable a backup 

A 5 server to reconstruct the context of an active call from a network call-in user connected 
□ to the network server after the connection to the primary server and/or its database has 
o been severed or interrupted. Simply stated, this context may be restored from an 

updated data string constructed by the primary server and held in storage by a memory 
associated with the network server. This memory may be a separate memory device 
20 connected to and used by the network server, or may be a memory cache within the 
network server during its operation. In the within disclosure, the primary server may be 
represented by a local RPMS, the secondary server may be represented by a backup 
RPMS, and the network server may be represented by a NAS. 
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The data string may be constructed as a coded message from the primary server to 
the network server that the latter may store in associated memory but not need. This 
data string may include accounting information and may be updated periodically. When 
the network connection to the primary server has been unexpectedly severed from the 
5 network user as in a server or database failure (either of which may be considered a local 
server failure for the purposes of this invention), the backup server may query the 
network server to provide the data string from its associated memory, reconstruct the 
relevant information for the active calls before the timing switch signals a time-out and 
disconnects the user from the network. 
40 In accordance with an embodiment of the invention, a redundant backup server 

S processes messages for a "call" that began its processing on a primary server. A single 
i\ RPMS backup server may support multiple local RPMSes. The RPMS backup server 
J may provide a backup configuration and backup counters in case the local RPMS server 
r 5 becomes unavailable. To avoid interruption of a call, the data string transfer from the 
^5 primary server to the backup server must occur in a manner transparent to the call-in 
3 user when a client NAS determines that the primary server is unreachable and switches 
B or "rolls-over" to communicate with the backup server. 

Since the NAS maintains data for each active call on its ports, an information 
packet constituting an "opaque" value may be stored that represents a "don't care" 
20 register with respect to the NAS, along with its own call data to make available to a 
server as needed. The opaque value, called the "server-state" attribute (SSA), contains 
context data that the server generates and updates for each active call, but may remain 
unused by the NAS. Since the service-state attribute may be produced from an 
aggregation of data elements in a specific sequence, this construction of the information 
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packet called the SSA may be described as an encoding or "deparsing" procedure. The 
SSA value may contain particular call data that the server assembles from its call attribute 
table to describe the call and may be sent back to a memory separate from the server 
with each response message to the NAS. In the preferred embodiment, that memory may 
5 be associated with (that is, connected to) the NAS. The NAS updates its call attribute 
table to store the information packet referred to as the SSA. Hence, the SSA stored in 
the NAS acts as a tether to the information a backup server requires to continue 
processing a call without the need for another server to continuously exchange data 
with the backup server, thereby saving communication bandwidth. 
JO When the NAS needs to communicate with the server concerning a particular 

% active call, it may send the SSA along with the message, or it may provide the SSA if a 
1 1 server requests it. The contents of the SSA may be proprietary to the server and may be 
J composed, in essence, of a condensed snapshot of the server's active call data as the call 
*/ moves through its states until the call is terminated. The data fields containing the call 
J 5 data parameters may be separated by a particular character, such as commas, for 
3 delimiting fields. Other characters besides commas may be used as delimiters, as is 
B trivially known to those with ordinary skill in the art. 

If a server (such as a RPMS) receives a message from a memory storage such as a 
NAS for an active call that the server lacks in its call attribute tables, that server can 
20 obtain the SSA from the NAS. The server can then parse the SSA to "reconstruct" the 
context of the call in its call attribute tables and subsequently provide a response to the 
NAS. An example of this circumstance might occur if the NAS rolls over to communicate 
with the backup server from a failed primary server. The backup server would query the 
NAS for the SSA of a call originated during the operation of the primary server. After 
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the call context reconstruction, the backup server provides the response to the NAS 
originally intended to be supplied by the primary server. The active call data continue to 
be available for billing and reports (such as for a local AAA server or in support of VPDN 
dial services), so that a meaningful call detail record may be generated when the call 
5 closes. Session and resource counts may be maintained by the backup server and 
restored to the primary server when the primary server becomes available. 

This procedure reduces network traffic and increases system efficiency since the 
primary server need not feed a separate message to the backup server for each change in 
call context. With the connection between the servers and the NAS already established, 
JO the SSA may be embedded in messages that are being passed from the NAS and server 
% for their normal business so the overhead of primary/backup communication, such as 
i\ generating headers, opening connections, etc., may be completely eliminated. The NAS 
^ may be used as the instrument of storage for the server's call data in the event of a local 
; 5 server failure and only contains the latest data set for a call that is open. Otherwise, a 
Jl5 more elaborate scheme would have to be devised between the primary and backup 
5 servers to ensure that active call data are current (meaning updated regularly) and free of 
□ "zombie" sessions, meaning inactive calls without a termination message. 

Both primary and secondary databases may hold the customer profiles and 
system configurations. A RPMS may utilize database replication to ensure that 
20 databases running on geographically distributed primary RPMS installations contain the 
same customer profile information. 

FIG. 3 illustrates an example configuration of a hypothetical redundant 
configuration incorporating the present invention. The network depicts an outside 
world 110 and the server group 112 sharing a telephone demarcation line 1 14. A call-in 



13 



CISCO-1515 



user or customer 1 16 on an ISP may be connected through a PSTN 1 18 in the outside 
world 110 across the demarcation line 1 14 to a NAS 120 in the server group 112. The 
NAS 120 may be connected to an Ethernet 122 that accesses other servers. While only 
a single NAS 120 is depicted in FIG. 3, more than one NAS 120 can be accommodated 
by the RPMS system in the server group 112. The primary or local RPMS 124 may be 
represented by a computer workstation 126 with a master DSM library 128, connected 
to the Ethernet 122 by means of a first port line 130. A primary database 132 may be 
dedicated to the primary or local RPMS 124 and be connected to the Ethernet 122 by a 
second port line 134. In this example configuration, only a single primary or local RPMS 
124 is exhibited rather than several. 

A secondary or backup RPMS 136 may be represented by a workstation 138 
with a slave DSM library 140, connected to the Ethernet 122 by means of a third port 
line 142. A secondary database 144 may be dedicated to the secondary or backup 
RPMS 136 and be connected to the Ethernet 122 by a second port line 146. 

If a primary or local RPMS 124 fails, loses its network connection 130 or is cut off 
from access to its master DSM library 128, the primary or local RPMS 124 will be 
isolated. With no information going in or out of the primary or local RPMS 124, the 
switch will timeout pending transactions. The administrator will need to re-establish 
connectivity for the ISP customer 1 16 in short order. In the meantime, the NAS 120 will 
use the secondary or backup RPMS 136 for authorizations and accounting. When 
connectivity is restored, the secondary or backup RPMS 136 will attempt to recreate call 
information from the NAS 120 when requests for that call are received. 

For example, the NAS 120 authorized a call with the primary or local RPMS 124 
that then lost network connectivity. The NAS 120 will attempt to send accounting 
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updates to the primary or local RPMS 124 and fail, then roll over to the secondary or 
backup RPMS 136. If in the meantime the primary or local RPMS 124 comes back on 
line and the ISP customer 116 hangs up, the NAS 120 will send a resource-freed signal to 
the primary or local RPMS 124 which will then attempt to recreate the call context and 
5 free the necessary counters. 

In the event that the secondary or backup RPMS 136 fails, it cannot be updated 
on the current counts. During this period and until all calls are closed that were active at 
the time it went down, the counts may be underreported. While in this state, the 
potential for over-subscription exists. When the secondary or backup RPMS 136 is 
JO brought back online, all counts from each primary or local RPMS 124 are transmitted to 
p the secondary or backup RPMS 136 where they are aggregated to reflect counts for the 
1 1 entire network server group 112. 

Y| An example of a comma-delimited string representing the SSA can be seen in FIG. 

* s 4 in which the data from the string can be used to reconstruct the call information 
J 5 needed to maintain the connection through a RPMS. The example SSA and its syntax 
3 as an attribute/value pair in the NAS can be seen in the data string 150, The 
A attribute/value pair may conform to TACACS+ or RADIUS or other such internet 

authentication protocol well known to those skilled in the art. The left segment may be 
the name 152 included in the attribute, which is depicted with an identifier prefix of 
20 "Name " rm-server-state"" in this example, separated from the right segment by a 
delimiter 154 shown as an equal sign. The right segment is the value 156, which is 
further subdivided into alphanumeric parameters that may be called "tokens" and 
separated by commas 158. 
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The value 156 begins with a first DNIS address 160 represented by a seven-digit 
integer. The second entry is the call type 162, which here is identified as "speech" 
followed by the third entry of CLID 164 represented by a seven-digit integer. The 
fourth entry is the modem port 166 represented by a five-field colon-separated 
5 parameter. The fifth entry is the resource group name 168 depicted by a period. The 
sixth and seventh entries are the call count 170 and the overflow count 172, each 
represented by an integer. The eighth, ninth, tenth, eleventh and twelfth entries, each 
denoted by a period and separated by commas 158, represent the start time 174, 
reference number 176, service group name 178, modem-tx-speed 180 and modem-rx- 
i40 speed 182, respectively. The thirteenth entry represents the VPDN group name 184. 
p The data contained in the SSA data string 150 include information that cannot be 

m obtained from the NAS administration call-status request. Source code to read the call 
m data into the SSA and reconstruct the call information from the contents of the SSA may 
r be written in Java language, although other programming languages are readily available 
Ml5 to persons having ordinary skill in the art. To construct the SSA data string 150, the call 
O data may appended together, separating each segment or token by a delimiter character 
=0 such as a comma 158. For reading the SSA data string 150, each token may be read 
sequentially as a character string with the end of the token being determined by the 
presence of a delimiter character. The character string thus read may be placed into a 
20 string buffer to be written onto its appropriate data-field. 

When an interruption between the NAS and its primary server occurs, the backup 
server issues an active-call petition to the NAS for the SSA data string 150. Once 
received, the server-state reconstruction subroutine in the backup server parses the SSA 
data-string 150 into the appropriate data functionalities. The code may check for the 
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number of tokens in the data string to verify its completeness. The code may then 
sequentially place the character string of the token into a string buffer and write that 
character string from the string buffer to the corresponding data-field. This process may 
continue until each data-field has received an appropriate character string, whether read 
5 from the SSA data string or assigned by a default mechanism. 

Such a process is described in the process flow diagram of FIG. 5, in which the 
tokens comprising the SSA data string are sequentially read and written onto to 
appropriate data-fields that describe the call attributes. Upon receiving the SSA data 
string, the subroutine 186 in the code reads the data string at reference 188. Using the 
JO delimiters as markers, the data string is separated into tokens at reference 190, with the 
p number of tokens counted. The token number may be compared to the number 
i\ expected rc exp as a read-error-detection tool at reference 192. If the number of tokens 
2 read is not equal to the number expected n exp , the subroutine may halt for further 
* s instructions at reference 194. Assuming the two numbers are equal, a sequencing 
.A 5 "loop" may be initiated at reference 196 with an example starting value of zero for the 
□ loop index L The loop is then sequenced in sequencer 198 with the character string in 
q the token placed in the buffer at reference 200. The loop index i may then be compared 
to a task value n, for a series of tasks n = 0, 1, 2,. . ., n exp -l at reference 202 with the 
process branching or diverting accordingly to the appropriate data-assigning task that 
20 corresponds to the value of the loop index (i = n). Once the task associated with the 
loop index equaling the task value (i = n) has been completed, the loop index may be 
incremented at reference 204, in this example by one (i = and the loop sequencing 
process continued to compare the loop index with the subsequent task value. 
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Each task to write the contents of the buffer to a data-field corresponds to a 
particular task value, and the process branches to the task when the loop index equals 
the corresponding task value. If the loop index equals zero (i = 0) the DNIS may be 
extracted from the buffer and written to the DNIS data-field at reference 206a. If the 
5 loop index equals one (i = 1), the call type may be extracted from the buffer and written 
to the call type data-field at reference 206b. If the loop index equals two (/ = 2), the 
CLID may be extracted from the buffer and written to the CLID data-field at reference 
206c, and so forth shown as continuing steps 206d. If the loop index reaches one less 
than the number expected (i = n exp -l), the VPDN may be extracted from the buffer and 
JO written to the VPDN data-field at reference 206e. Once completed, the incremented loop 
% index equals the number expected (z - rc exp ) and the completed condition is assigned the 
5 1 logic value of TRUE at reference 208, whereas the default prior to this would be FALSE. 
J Once the data-fields are completed, the attribute information for the call is available and 
: the call may be resumed by the server at reference 210. 

A5 The overall process for a backup server responding to a local server failure is 

□ summarized in the process flow diagram of FIG. 6. The network roll-over process may 
B begin with a call being received by the NAS from a user at reference 212. The call is 
processed by the primary server at reference 214, wherein the server's function is 
performed by a primary RPMS. The call attributes are coded in a SSA, which is created 
20 and updated for characterizing the call at reference 216. This function is typically 

performed by the RPMS. The SSA may be included with each message sent to the NAS 
from the RPMS at reference 218. The NAS then receives and stores the SSA in memory 
at reference 220 for subsequent retrieval if needed. 
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A detector for alerting the NAS of a server failure may be employed at reference 
222 to determine if the primary RPMS is still linked to the network. In the event that no 
failure has occurred, indicating that the primary RPMS is still functioning, the call 
continues to be processed by the primary RPMS at reference 214. However, if such a 
5 failure has occurred, this condition may be detected at reference 224, and the NAS 
responds by sending a message to the secondary server, in this case a backup RPMS, to 
continue processing the call at reference 226. The backup RPMS checks its database to 
determine if the call attribute information is available at reference 228. If not, the backup 
RPMS requests the NAS to provide the SSA at reference 230. The NAS sends the SSA 
40 to the backup RPMS at reference 232, and the backup RPMS then parses the SSA at 
% reference 234 to obtain the latest call attribute information it requires. The backup 
hi RPMS then proceeds to process the call at reference 236. If the check by the backup 
J RPMS for call attribute information determines the information's availability at reference 
' 228, then the backup RPMS need not query the NAS and may proceed directly to 
A5 process the call at reference 236. The steps 216, 218 and 220 provided through the 
p primary RPMS processing of the call at reference 214 may also be continued by the 
ft backup RPMS processing of the call at reference 236. 

While embodiments and applications of the invention have been shown and 
described, it would be apparent to those of ordinary skill in the art having the benefit of 
20 this disclosure, that many more modifications than mentioned above are possible without 
departing from the inventive concepts herein. The invention, therefore, is not to be 
restricted except in the spirit of the appended claims. 
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CLAIMS 

What is claimed is: 

1. A backup server for enabling a data communications network to recover from a 
local server failure, said data communications network including a network access server 

5 (NAS) for coupling a call placed from a call-in user to said data communications network 
and a failure detector for detecting said local server failure, said NAS having associated 
memory, said NAS connected to said network, said backup server comprising: 
a server-state attribute (SSA) receiver responsive to the failure detector for 
receiving from the associated memory an information packet associated with the call 
JO upon an occurrence of the local server failure, wherein said information packet 
2 characterizes a plurality of SSA information data associated with the call placed to the 
1 1 NAS by the call-in user; 

J a memory reader for reading said information packet from said SSA receiver; and 

" " a parser for reconstructing said plurality of SSA information data from said 

=45 information packet from said memory reader, so that the backup server can recover the 
□ call to the data communications network. 

2. A backup server according to claim 1 wherein said information packet consists of 
an attribute/value pair that can be parsed into a plurality of separate data entries. 

20 

3. A backup server according to claim 1 wherein said information packet further 
comprises a plurality of aggregated data elements from a call attribute table. 
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4. A backup server according to claim 3 wherein said plurality of aggregated data 
elements of said information packet are separated by said parser for reconstructing said 
plurality of SSA information data from said information packet. 

5 5. A backup server for enabling a data communications network to recover from a 
local server failure, said data communications network including a network access server 
(NAS) for coupling a call placed from a call-in user to said data communications network, 
said NAS having associated memory, said backup server comprising: 
a failure detector for detecting said local server failure; 
,40 a server-state attribute (SSA) receiver responsive to said failure detector for 

receiving from the associated memory an information packet associated with the call 
SI upon an occurrence of the local server failure, wherein said information packet 

characterizes a plurality of SSA information data associated with the call placed to the 
5 * B NAS by the call-in user; 

\ JL5 a memory reader for reading said information packet from said SSA receiver; and 

q a parser for reconstructing said plurality of SSA information data from said 

>p information packet from said memory reader, so that the backup server can recover the 
call to the data communications network. 

20 6. A backup server according to claim 5 wherein said information packet consists of 
an attribute/value pair that can be parsed into a plurality of separate data entries. 

7. A server backup mechanism according to claim 5 wherein said information packet 
further comprises a plurality of aggregated data elements from a call attribute table. 

21 
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8. A backup server according to claim 7 wherein said plurality of aggregated data 
elements of said information packet are separated by said parser for reconstructing said 
plurality of SS A information data from said information packet. 

5 

9. A local server for enabling a data communications network to recover from a local 
server failure, said data communications network including a network access server 
(NAS) for coupling a call placed from a call-in user to said data communications network 
and a failure detector for determining if said local server failure has occurred, said NAS 

10 having an associated memory, said NAS connected to said network, said local server 
2 comprising: 

!; an encoder for generating an information packet associated with the call, wherein 

% said information packet characterizes a plurality of server-state attribute (SSA) 

information data associated with the call; and 
2 5 a sender for transmitting said information packet associated with the call from said 

't encoder to the associated memory. 

1 0. A local server according to claim 9 wherein said information packet consists of an 
attribute/value pair that can be parsed into a plurality of separate data entries. 

20 

11. A local server according to claim 9 wherein said information packet further 
comprises a plurality of aggregated data elements from a call attribute table. 
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12. A local server according to claim 1 1 wherein said plurality of aggregated data 
elements of said information packet are separated by said parser for reconstructing said 
plurality of SSA information data from said information packet. 

13. A server enabling a data communications network to recover from a local server 
failure, said data communications network including a network access server (NAS) for 
coupling a call placed from a call-in user to said data communications network and a 
failure detector for determining if said local server failure has occurred, said NAS having 
an associated memory, said NAS connected to the network, said server comprising: 

an encoder for generating an information packet, wherein said information packet 
characterizes a plurality of server-state attribute (SSA) information data associated 
with the call; 

a sender for transmitting said information packet from said encoder to the NAS to 
which the call is coupled for storing in the associated memory; 

a receiver responsive to the failure detector for receiving from the associated 
memory an information packet associated with the call upon an occurrence of the local 
server failure, wherein said information packet characterizes a plurality of SSA 
information data associated with the call; 

a memory reader for reading said information packet from said SSA receiver; and 

a parser for reconstructing from said information packet associated with the call 
into a plurality of SSA information data so that the backup server can recover the call 
to the data communications network. 
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14. A server according to claim 13 wherein said information packet consists of an 
attribute/value pair that can be parsed into a plurality of separate data entries. 

15. A server according to claim 13 wherein said information packet further comprises 
5 a plurality of aggregated data elements from a call attribute table. 

16. A server according to claim 15 wherein said plurality of aggregated data elements 
of said information packet are separated by said parser for reconstructing said plurality 
of SS A information data from said information packet. 

40 

tf 17. A network access server (NAS) for enabling a data communications network to 

i l recover from a local server failure and for coupling a call placed from a call-in user to said 

i data communications network, said data communications network including a local 

* a server for generating an information packet, wherein said information packet 

J5 characterizes a plurality of server-state attribute (SSA) information data associated with 

□ said call, and a backup server for parsing said information packet to recover said 

5 plurality of SSA information data in the event that said local server failure occurs, said 

local server, said backup server and said NAS being connected to said network, said 

NAS comprising: 

20 a receiver for receiving the information packet from the local server; 

an associated memory for recording the information packet; 
a memory writer for writing the information packet from said receiver to said 
associated memory; 

a failure detector for determining if the local server failure has occurred; 
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a memory reader for reading the information packet from said associated memory; 
and 

a sender for transmitting the information packet from said memory reader to the 
backup server if the local server failure has occurred. 

5 

18. A NAS according to claim 17 wherein said information packet consists of an 
attribute/value pair that can be parsed into a plurality of separate data entries. 

19. A NAS according to claim 17 wherein said information packet further comprises a 
40 plurality of aggregated data elements from a call attribute table. 

y 20. A server backup system for enabling a network to recover a call placed by a call- 
J in user to said network from a server access failure, said network including a memory 

connected to said network and a failure detector connected to the network for 
A5 determining whether said server access failure has occurred, said memory and said failure 
3 detector both associated with a network access server (NAS) that is connected to said 
o network, said system comprising: 

a server connected to the network for servicing the call; 
an encoder for generating an information packet that characterizes a plurality of 
20 server-state attribute (SSA) information data associated with the call; 

a receiver responsive to the failure detector for reading said information packet 
from the memory associated with the NAS, said receiver associated with said server, 
said information packet in the memory upon an occurrence of the local server failure; 
and 
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a parser for reconstructing said plurality of SSA information data from said 
information packet, and providing said plurality of SSA information data to said server, 
said parser associated with said server. 

5 21. A server backup system according to claim 20 wherein said information packet 
consists of an attribute/value pair that can be parsed into a plurality of separate data 
entries. 

22. A server backup system according to claim 20 wherein said information packet 
,J0 further comprises a plurality of aggregated data elements from a call attribute table. 

&\ 23. A server backup system according to claim 22 wherein said plurality of 

aggregated data elements of said information packet are separated by said parser for 
7 = reconstructing said plurality of SSA information data from said information packet. 

U5 

3 24. A server backup mechanism according to claim 20 wherein said server is a 
% 0 resource pool manager server (RPMS). 

25. A server backup system for enabling a network to recover a call placed by a call- 
20 in user to said network from a server access failure, said network including a memory 
connected to said network, said memory associated with a network access server (NAS) 
that is connected to said network, said system comprising: 
a server connected to the network for servicing the call; 
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an encoder for generating an information packet that characterizes a plurality of 
server-state attribute (SSA) information data associated with the call; 

a sender for transmitting said information packet from said encoder to the memory 
associated with the NAS, said sender associated with said server; 
5 a failure detector for determining whether the server access failure has occurred, 

said failure detector associated with said server; 

a data-caller responsive to said failure detector for requesting said information 
packet from the memory associated with the NAS, said data-caller associated with said 
server; 

JO a receiver responsive to said data-caller for reading said information packet from 

the memory, said receiver associated with said server, said information packet in the 

jij memory upon an occurrence of the local server failure; and 

m a parser for reconstructing said plurality of SSA information data from said 

information packet, and providing said plurality of SSA information data to said server, 

1^5 said parser associated with said server. 

=0 26. A server backup system according to claim 25 wherein said information packet 
consists of an attribute/value pair that can be parsed into a plurality of separate data 
entries. 

20 

27. A server backup system according to claim 25 wherein said information packet 
further comprises a plurality of aggregated data elements from a call attribute table. 
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28. A server backup system according to claim 27 wherein said plurality of 
aggregated data elements of said information packet are separated by said parser for 
reconstructing said plurality of SSA information data from said information packet. 

5 29. A server backup system according to claim 25 wherein said server is a resource 
pool manager server (RPMS). 

30. A server backup system for enabling a network to recover a call placed by a call- 
in user to said network from a server access failure, said network including a memory 
f-dO connected to said network and a failure detector connected to the network for 
]5 determining whether said server access failure has occurred, said memory and said failure 
nj detector both associated with a network access server (NAS) that is connected to said 
m network, said system comprising: 

=~ a first server connected to the network for servicing the call; 

j^l5 a second server connected to the network for servicing the call if the server access 

D failure occurs; 

=y an encoder for generating an information packet, said encoder associated with said 

first server, wherein said information packet characterizes a plurality of server-state 
attribute (SSA) information data associated with the call, said information packet 
20 further comprising a plurality of aggregated data elements from a call attribute table; 

a sender for transmitting said information packet from said encoder to the memory 
associated with the NAS, said sender associated with said second server; 

a receiver responsive to the failure detector associated with the NAS for reading 
said information packet from the memory upon an occurrence of the local server 

28 



CISCO-1515 



failure, said receiver associated with said second server, said information packet in the 
memory ; and 

a parser for reconstructing said plurality of SSA information data from said 
information packet, and providing said plurality of SSA information data to said 
5 second server, said parser associated with said second server. 

31. A server backup system according to claim 30 wherein said second server further 
includes: 

a data-caller responsive to the failure detector for requesting said information 
40 packet from the memory associated with the NAS. 

32. A server backup system according to claim 3 1 wherein said first server is a 
i resource pool manager server (RPMS) and said second server is a backup RPMS. 

a5 33. A method performed by a backup server for enabling a network to recover a call 
3 placed by a call-in user to said network from a server access failure, said network 
~i including a local server, said backup server, a memory connected to said network, an 
information packet generator connected to said network for generating an information 
packet that characterizes a plurality of server-state attribute (SSA) information data 
20 associated with the call placed by said call-in user to said network, and a failure detector 
connected to said network for determining whether said server access failure has 
occurred, said memory and said failure detector both associated with a network access 
server (NAS) that is connected to said network, said local server at least initially 
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connected to said network, said backup server connected to said network, said method 
comprising: 

receiving the information packet from the memory associated with the NAS, said 
receiving being responsive to the failure detector when the server access failure 
5 occurs; and 

parsing the information packet to reconstruct said plurality of SSA information data 
for the call. 

34. A method performed by the backup server according to claim 33 wherein the 
JO backup server is responsive to the failure detector when the server access failure occurs, 
% said method further comprising: 

II petitioning to the NAS for the information packet after the NAS requests the 

J plurality of SSA information data; 

receiving the information packet from the memory; and 
A 5 sending said plurality of SSA information data to the NAS after parsing the 

□ information packet is completed. 

35. A method performed by the backup server according to claim 33 wherein said 
parsing the information packet further includes: 

20 reading a value data string and subdividing said value data string into a plurality of 

data fields. 

36. A method performed by a local server for enabling a network to recover a call 
placed by a call-in user to said network from a server access failure, said network 
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including a memory connected to said network, a failure detector connected to the 
network for determining whether said server access failure has occurred, said local 
server, and a backup server, said memory and said failure detector both associated with a 
network access server (NAS) that is connected to said network, said local server at least 
5 initially connected to said network, said backup server connected to said network, said 
NAS sending an information packet from said memory to said backup server in response 
to said failure detector, said backup server parsing the information packet to reconstruct 
said plurality of server-state attribute (SSA) information data for said call, said method 
comprising: 

40 generating an information packet that characterizes the plurality of SSA 

% information data associated with the call placed by the call-in user to the network; and 

lj sending the information packet to the NAS to be stored in the associated memory. 

r 37 . A method performed by the local server according to claim 36 wherein said 
^15 generating an information packet further comprises; 

3 encoding a plurality of aggregated data elements from a call attribute table 

fl representing said plurality of server-state attribute (SSA) information data; and 

delimiting information packet into an attribute data string and a value data string. 

20 38. A method performed by a network access server (NAS) for enabling a network to 
recover a call placed by a call-in user to said network from a server access failure, said 
network including an associated memory connected to said network, a failure detector 
connected to the network for determining whether said server access failure has 
occurred, a local server, and a backup server, said associated memory and said failure 
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detector both associated with the NAS that is connected to said network, said local 
server at least initially connected to said network, said backup server connected to said 
network, said local server generating an information packet that characterizes a plurality 
of server-state attribute (SSA) information data associated with the call placed by said 
call-in user to said network, said backup server parsing the information packet to 
reconstruct said plurality of SSA information data for said call, said method comprising: 

receiving the information packet from the local server by a receiver; 

recording the information packet in the associated memory; 

writing the information packet from said receiver to the associated memory; 

determining if the local server failure has occurred by the failure detector; 

reading the information packet from the associated memory by a memory reader; 
and 

transmitting the information packet from the memory reader to the backup server if 
the local server failure has occurred. 

39. A method performed by a server for enabling a network to recover a call placed 
by a call-in user to said network from a server access failure, said network including said 
server connected to said network, a memory connected to said network and a failure 
detector connected to the network for determining whether said server access failure 
has occurred, said memory and said failure detector both associated with a network 
access server (NAS) that is connected to said network, said method comprising: 
generating an information packet that characterizes a plurality of server-state 
attribute (SSA) information data for the call placed by the call-in user to the network; 
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sending the information packet to the NAS to be stored in the memory associated 
with the NAS; 

receiving said information packet from the memory associated with the NAS, said 
receiving being responsive to the failure detector when the server access failure 
5 occurs; and 

parsing said information packet to reconstruct said plurality of SSA information 
data for the call. 

40. A method performed by the server according to claim 39 wherein the server is a 
40 resource pool manager server (RPMS). 

i\ 41. A method performed by the server according to claim 39 said server is responsive 
5 to the failure detector when the server access failure occurs, said method further 
" = comprising: 

J.5 petitioning said information packet to the NAS after receiving a request from the 

jj NAS for the plurality of SSA information data; 

3 receiving said information packet from the memory; and 

sending said plurality of SSA information data to the NAS after parsing said 
information packet is completed. 

20 

42. A method performed by the server according to claim 39 wherein said generating 
an information packet further comprises: 

encoding a plurality of aggregated data elements from a call attribute table 
representing said plurality of SSA information data; and 
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delimiting the information packet into an attribute data string and a value data 
string. 

43. A method performed by the server according to claim 39 wherein said parsing 
said information packet further includes: 

reading a value data string and subdividing said value data string into a plurality of 
data fields. 

44. A programmable storage device readable by a machine tangibly embodying a 
program of instructions executable by the machine to perform method steps performed 
by a backup server for enabling a network to recover a call placed by a call-in user to 
said network from a server access failure, said network including a local server, said 
backup server, memory connected to said network, an information packet generator 
connected to said network for generating an information packet that characterizes a 
plurality of server-state attribute (SSA) information data for said call placed by said call- 
in user to said network, and a failure detector connected to said network for determining 
whether said server access failure has occurred, said memory and said failure detector 
both associated with a network access server (NAS) that is connected to said network, 
said local server at least initially connected to said network, said backup server 
connected to said network, said method comprising: 

receiving the information packet from the memory associated with the NAS, said 
receiving being responsive to the failure detector when the server access failure 
occurs; and 
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parsing the information packet to reconstruct said plurality of SSA information data 
for the call. 

45. A programmable storage device according to claim 44 wherein the backup server 
5 is responsive to the failure detector when the server access failure occurs, said method 
further comprising: 

petitioning to the NAS for the information packet after the NAS requests the 
plurality of SSA information data; 

receiving the information packet from the memory to the backup server; and 
JO sending the plurality of SSA information data to the NAS after parsing the 

2 information packet is completed. 

5 46. A programmable storage device according to claim 44 wherein said parsing the 
* 8 information packet further includes: 

J 5 reading a value data string and subdividing said value data string into a plurality of 

5 data fields. 

47. A programmable storage device readable by a machine tangibly embodying a 
program of instructions executable by the machine to perform method steps performed 
20 by a local server for enabling a network to recover a call placed by a call-in user to said 
network from a server access failure, said network including a memory connected to said 
network, a failure detector connected to the network for determining whether said 
server access failure has occurred, said local server, and a backup server, said memory 
and said failure detector both associated with a network access server (NAS) that is 
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connected to said network, said local server at least initially connected to said network, 
said backup server connected to said network, said NAS sending an information packet 
from said memory to said backup server in response to said failure detector, said backup 
server parsing the information packet to reconstruct said plurality of server-state 
5 attribute (SSA) information data for said call, said method comprising: 

generating an information packet that characterizes the plurality of SSA 
information data for the call placed by the call-in user to the network; and 
sending the information packet to the NAS. 

J.0 48. A programmable storage device according to claim 47 wherein said generating an 
% information packet further comprises: 

i\ encoding a plurality of aggregated data elements from a call attribute table 

5 representing the plurality of SSA information data; and 

* s delimiting information packet into an attribute data string and a value data string. 

J5 

5 49. A programmable storage device readable by a machine tangibly embodying a 
S program of instructions executable by the machine to perform method steps performed 
by a network access server (NAS) for enabling a network to recover a call placed by a 
call-in user to said network from a server access failure, said network including an 
20 associated memory connected to said network, a failure detector connected to the 
network for determining whether said server access failure has occurred, a local server, 
and a backup server, said associated memory and said failure detector both associated 
with the NAS that is connected to said network, said local server at least initially 
connected to said network, said backup server connected to said network, said local 
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server generating an information packet that characterizes a plurality of server-state 
attribute (SSA) information data associated with the call placed by said call-in user to 
said network, said backup server parsing the information packet to reconstruct said 
plurality of SSA information data for said call, said method comprising: 
5 receiving the information packet from the local server by a receiver; 

recording the information packet in the associated memory; 

writing the information packet from said receiver to the associated memory; 

determining if the local server failure has occurred by the failure detector; 

reading the information packet from the associated memory by a memory reader; 
40 and 

% transmitting the information packet from the memory reader to the backup server if 

y the local server failure has occurred. 

" 50. A programmable storage device readable by a machine tangibly embodying a 
A5 program of instructions executable by the machine to perform method steps by a server 
□ for enabling a network to recover a call placed by a call-in user to said network from a 
fj server access failure, said network including said server connected to said network, a 
memory connected to said network and a failure detector connected to the network for 
determining whether said server access failure has occurred, said memory and said failure 
20 detector both associated with a network access server (NAS) that is connected to said 
network, said method comprising: 

generating an information packet that characterizes a plurality of SSA information 
data for the call placed by the call-in user to the network; 
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sending the information packet to the NAS to be stored in the memory associated 
with the NAS; 

receiving said information packet from the memory associated with the NAS, said 
receiving being responsive to the failure detector when the server access failure 
occurs; and 

parsing said information packet by said server to reconstruct said plurality of SSA 
information data for the call 

51. A programmable storage device according to claim 50 said server is responsive to 
the failure detector when the server access failure occurs, said method steps further 
comprising: 

petitioning said information packet to the NAS after receiving a request from the 

NAS for said plurality of SSA information data; 

receiving said information packet from the memory; and 

sending said plurality of SSA information data to the NAS after parsing said 

information packet is completed. 
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ABSTRACT 

A method and apparatus for network server recovery maintains an ongoing call 
5 by reconstructing its call context from a server-state attribute (SSA) that is generated by 
a first server, recorded in separate storage and retrieved by a second server in the event 
that a connection to the first server is interrupted. The SSA encodes call data that can 
be used to enable a server to maintain the call. The separate storage is preferably 
associated with a network access server (NAS) that does not itself use the SSA. 
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